github-ci: cancel on push, read only permissions

diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index a86e4b6f2e7961bcc1402c4d63fbee2f65045473..22a19f3e33409c430d56a7eefdc3297295eeb3d5 100644 (file)
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -4,6 +4,12 @@ on:
   - push
   - pull_request
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions: read-all
+
 jobs:
 
   alma-9: